S0367 - Emotet

Emotet is a Trojan that is primarily spread through spam emails (malspam). The infection may arrive either via malicious script, macro-enabled document files, or malicious link.

Author
agomez
Created
2022-06-09 19:49:07
Last updated
2026-02-07 19:18:33
Downloads
3608262
IPv4 indicators
88
Hostname indicators
263
URL indicators
1154
Sample indicators
158

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

www.hineniestetica.com.br Hostname

modified 2026-09-21 12:35:51
Emotet (Abuse.ch) · Generic.Malware (Hybrid-Analysis) · Heur.Macro.Generic.Gen (Hybrid-Analysis) · Emotet (Mr.Looquer) · Malware site (Hybrid-Analysis)

www.tatweeralsham.com Hostname

modified 2026-09-21 12:35:50
Emotet (Abuse.ch)

coach.getfit21latino.com Hostname

modified 2026-09-21 12:35:48
Emotet (Mr.Looquer)

malini-design.de Hostname

modified 2026-09-21 12:33:32
Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

kyleriffic.com Hostname

modified 2026-09-21 12:33:23
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

vilajansen.com.br Hostname

modified 2026-09-21 12:32:44
Malware site (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Malware Download (Abuse.ch) · HEUR:Trojan.MSOffice.SAgent (Hybrid-Analysis) · Emotet (Abuse.ch)

shulovbaazar.com Hostname

modified 2026-09-21 12:32:43
Emotet (Abuse.ch) · Trojan.Generic (Hybrid-Analysis) · Downloader (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

studyresourceport.com.ua Hostname

modified 2026-09-21 12:32:28
Emotet (Abuse.ch)

cabelectrical.com.au Hostname

modified 2026-09-21 12:32:27
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Unwanted Software (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

artephatun.com.br Hostname

modified 2026-09-21 12:32:25
Emotet (Abuse.ch)

farschid.de Hostname

modified 2026-09-21 12:31:57
Malware Download (URLhaus Abuse.ch) · Emotet (Maltiverse Threat Observatory)

dayimachine.com Hostname

modified 2026-09-21 12:31:40
Trojan.Generic (Hybrid-Analysis) · Emotet (Abuse.ch) · VB:Trojan.Valyria (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

http://cdn.pzw.io/a070739e2a5107fb97aa429ed76fa85a.doc URL

modified 2026-09-21 11:50:13
Emotet (Maltiverse Threat Observatory)

cdn.pzw.io Hostname

modified 2026-09-21 11:50:13
Trojan.downloader (Maltiverse Threat Observatory) · Emotet (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

http://cdn.pzw.io/93b22c31591370d7ccf318fa7f56fd0b.doc URL

modified 2026-09-21 11:50:13
Emotet (Maltiverse Threat Observatory)

http://cdn.pzw.io/44a119f7577d7e69d211ec3fd6c6c123.doc URL

modified 2026-09-21 11:50:13
Emotet (Maltiverse Threat Observatory)

static.s123-cdn-static.com Hostname

modified 2026-09-21 11:33:41
Phishing site (Hybrid-Analysis) · Malicious site (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella) · Malware Download (URLhaus Abuse.ch)

pinmeiglobal.com Hostname

modified 2026-09-21 10:43:25
Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

viveteria.com Hostname

modified 2026-09-21 08:50:39
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Emotet (Mr.Looquer)

prosourcedpartners.com Hostname

modified 2026-09-21 08:50:16
Emotet (Telefonica CO SOC) · Malicious domain (SANS Internet Storm Center)

fultonandassociates.com Hostname

modified 2026-09-21 08:48:30
Emotet (Abuse.ch) · Generic.Malware (Hybrid-Analysis) · VB:Trojan.VBA.Agent (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

khudothiaquacity.com Hostname

modified 2026-09-21 08:46:13
Emotet (Abuse.ch)

bishopians.org Hostname

modified 2026-09-21 08:43:03
Emotet (Mr.Looquer)

filmeseserieshd.6te.net Hostname

modified 2026-09-21 08:42:55
Emotet (Telefonica CO SOC)

m24news.com Hostname

modified 2026-09-21 08:37:21
Emotet (Mr.Looquer)

wp.jednicky.cz Hostname

modified 2026-09-21 08:37:12
Emotet (Abuse.ch) · Trojan.Autoruns.GenericKDS (Hybrid-Analysis) · Trojan.W97M.EMOTET (Hybrid-Analysis) · VBA.Manilla.1 (Hybrid-Analysis) · Emotet (Mr.Looquer)

nypthealing.com Hostname

modified 2026-09-21 08:36:26
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · W97m.Downloader (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

1it.fit Hostname

modified 2026-09-21 08:31:04
Emotet (ThreatFox Abuse.ch)

http://tibiadb.com/MagebotSetupvT852.exe URL

modified 2026-09-21 08:25:20
Emotet (Maltiverse Threat Observatory)

tibiadb.com Hostname

modified 2026-09-21 08:25:18
Emotet (Maltiverse Threat Observatory) · Trojan.downloader (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory) · Trojan.wisdomeyes (Maltiverse Threat Observatory)

http://tibiadb.com/exes/MagebotSetupvT852.exe URL

modified 2026-09-21 08:25:18
Emotet (Maltiverse Threat Observatory)

41.185.8.147 IPv4

modified 2026-09-21 07:07:56
Phishing (Phishtank) · Emotet (Abuse.ch) · W97M.Downloader (Hybrid-Analysis) · Phishing NedBank Limited (OpenPhish) · Malicious Host (HoneyDB)

http://www.oldversiondownload.com/oldversions/mixpad-4-16-2016-10-06.exe URL

modified 2026-09-21 06:33:34
Emotet (Maltiverse Threat Observatory)

kuznetsov.ca Hostname

modified 2026-09-21 04:40:08
Emotet (Abuse.ch) · W97m.Downloader (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

festivalinternacionaldehistoria.com Hostname

modified 2026-09-21 04:40:06
Downldr.HB.gen (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Emotet (Abuse.ch) · Heur.Macro.Generic.Gen (Hybrid-Analysis) · Covid19 scam (CCN-CERT)

hockeystickz.com Hostname

modified 2026-09-21 04:40:05
Generic.Malware (Hybrid-Analysis) · Emotet (Telefonica CO SOC) · Emotet (Abuse.ch) · Malicious domain (SANS Internet Storm Center)

chedea.eu Hostname

modified 2026-09-21 04:39:52
Malware Download (Abuse.ch) · Emotet (Telefonica CO SOC) · Emotet (Abuse.ch) · Malicious domain (SANS Internet Storm Center) · Covid19 scam (Cyber Threat Coalition)

morlo.net Hostname

modified 2026-09-21 04:39:26
Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · VB.Heur.EmoDldr.28.69743ECD (Hybrid-Analysis) · Malicious url (Cyber Threat Coalition)

nasmocopurwodadi.com Hostname

modified 2026-09-21 04:37:38
Emotet (Abuse.ch) · BehavesLike.Downloader (Hybrid-Analysis) · Trojan.Generic (Hybrid-Analysis) · Troj_Gen.F04IE00EM19 (Hybrid-Analysis) · Emotet (Mr.Looquer)

laopos.com Hostname

modified 2026-09-21 04:37:38
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Social Engineering (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

haikouweixun.com Hostname

modified 2026-09-21 04:36:59
Malware Download (URLhaus Abuse.ch) · Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Trojan.W97M.EMOTET (Hybrid-Analysis) · W97M.Agent (Hybrid-Analysis)

maslianit.ru Hostname

modified 2026-09-21 04:36:45
Malware Download (Abuse.ch) · Emotet (Mr.Looquer)

www.tentostack.com Hostname

modified 2026-09-21 04:36:41
Emotet (Abuse.ch) · Emotet (Mr.Looquer)

asbestentsorg.de Hostname

modified 2026-09-21 04:36:28
Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

holfve.se Hostname

modified 2026-09-21 04:36:11
Malware Download (Abuse.ch) · Generic.Malware (Hybrid-Analysis) · Emotet (Abuse.ch) · VBA.Heur.Logan.849 (Hybrid-Analysis) · W97M.Agent (Hybrid-Analysis)

soft1.ucbug.cc Hostname

modified 2026-09-21 04:36:09
Emotet (Maltiverse Threat Observatory) · Graftor (Maltiverse Threat Observatory) · Trojan.downloader (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

rastkultur.de Hostname

modified 2026-09-21 04:36:03
Emotet (Abuse.ch) · Emotet (Mr.Looquer)

mundodosabor.com Hostname

modified 2026-09-21 04:36:03
Malware Download (Abuse.ch) · Emotet (Abuse.ch)

www.lavenderkart.com Hostname

modified 2026-09-21 04:35:56
VB:Trojan.Valyria (Hybrid-Analysis) · Emotet (Abuse.ch) · LooksLike.Macro.Malware (Hybrid-Analysis)

todomuta.com Hostname

modified 2026-09-21 04:35:54
Malicious site (Hybrid-Analysis) · Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Lista España (CronUp Threat Intel)

robertaayres.com.br Hostname

modified 2026-09-21 04:35:44
Malware Download (Abuse.ch) · Emotet (Mr.Looquer)

billfritzjr.com Hostname

modified 2026-09-21 04:35:30
Emotet (Telefonica CO SOC) · Malware site (Hybrid-Analysis) · Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Malicious domain (SANS Internet Storm Center)

pciholog.ru Hostname

modified 2026-09-21 04:35:17
Ransomware Locky distribution site (Ransomware Tracker) · Ransomware (Ransomware Tracker) · cerber,locky,ransomware (Maltiverse) · banker,dridex,evasive (Maltiverse) · Emotet (Mr.Looquer)

just-rights.com Hostname

modified 2026-09-21 04:35:17
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Elf (Mr.Looquer)

ncvascular.com.au Hostname

modified 2026-09-21 04:35:08
Emotet (Telefonica CO SOC) · Malicious domain (SANS Internet Storm Center) · VB:Trojan.Valyria (Hybrid-Analysis) · Malicious site (Hybrid-Analysis)

therattgang.com Hostname

modified 2026-09-21 04:35:02
Emotet (Telefonica CO SOC) · Malicious site (Hybrid-Analysis) · HEUR:Trojan.MSOffice.SAgent (Hybrid-Analysis) · VB:Trojan.Valyria (Hybrid-Analysis) · Emotet (Mr.Looquer)

fortismech.ru Hostname

modified 2026-09-21 04:35:01
Emotet (Telefonica CO SOC) · Malicious site (Hybrid-Analysis) · Malicious domain (SANS Internet Storm Center)

www.tcxd.vn Hostname

modified 2026-09-21 04:34:44
Emotet (Maltiverse Research Team) · Emotet (Mr.Looquer)

fv2-1.failiem.lv Hostname

modified 2026-09-21 04:34:43
Malware Download (Abuse.ch) · Emotet (Mr.Looquer)

2387c669bceee7d4b8f82af0d969623ad848b177e71991190967c44ae03d9145.exe.dll Sample

modified 2026-09-21 03:02:06
Heodo (MalwareBazaar Abuse.ch) · Downloader (VM-Ray) · Emotet (ThreatFox Abuse.ch)

http://channellake.com/dYJXj URL

modified 2026-09-21 02:54:06
Emotet (Telefonica CO SOC) · Emotet (Abuse.ch)

http://akdavis.com/c/ URL

modified 2026-09-21 02:33:26
Emotet (Telefonica CO SOC) · Emotet (Abuse.ch)

https://reifenquick.de/Scripts/hl8-8w4cs-6325/ URL

modified 2026-09-21 02:31:25
Emotet (URLhaus Abuse.ch) · Emotet (Maltiverse Threat Observatory)

trendmoversdubai.com Hostname

modified 2026-09-21 01:47:03
VB:Trojan.VBA.Downloader (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Emotet (Abuse.ch) · Alexa Top 1 Million (Alexa) · Top Popularity Site (Cisco Umbrella)

cargacontrol.com.co Hostname

modified 2026-09-21 00:39:50
Emotet (Abuse.ch) · Malicious site (Hybrid-Analysis) · Emotet (Telefonica CO SOC) · Malware Download (Abuse.ch) · Unknown Stealer (ThreatFox Abuse.ch)

test2.cxyw.net Hostname

modified 2026-09-21 00:39:47
Emotet (Abuse.ch) · Trojan.W97M.POWLOAD (Hybrid-Analysis) · VB:Trojan.VBA.Agent (Hybrid-Analysis) · W97m.Downloader (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition)

sphinx-tour.com Hostname

modified 2026-09-21 00:39:40
Emotet (Maltiverse Research Team) · Emotet (Telefonica CO SOC) · Emotet (Abuse.ch)

sportpony.ch Hostname

modified 2026-09-21 00:39:38
Emotet (Maltiverse Research Team) · Malicious domain (SANS Internet Storm Center)

procoach.jp Hostname

modified 2026-09-21 00:39:37
Emotet (Maltiverse Research Team) · Generic.Malware (Hybrid-Analysis) · Malicious domain (SANS Internet Storm Center) · Malicious site (Hybrid-Analysis)

equintl.com Hostname

modified 2026-09-21 00:39:27
Emotet (Mr.Looquer)

playgo88.fun Hostname

modified 2026-09-21 00:39:27
Emotet (ThreatFox Abuse.ch) · Quasar RAT (ThreatFox Abuse.ch)

wp01.devanshp.com Hostname

modified 2026-09-21 00:39:15
VB:Trojan.VBA.Agent (Hybrid-Analysis) · Emotet (Abuse.ch) · Social Engineering (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

newtop.one Hostname

modified 2026-09-21 00:39:14
Emotet (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

gfpar.es Hostname

modified 2026-09-21 00:38:54
Emotet (Abuse.ch) · Trojan.W97M.POWLOAD (Hybrid-Analysis) · Lista España (CronUp Threat Intel)

www.conci.pt Hostname

modified 2026-09-21 00:38:33
Emotet (Telefonica CO SOC) · Malicious domain (SANS Internet Storm Center)

www.spiidgas.com.br Hostname

modified 2026-09-21 00:37:50
Emotet (Abuse.ch) · Malware site (Hybrid-Analysis) · Malware Download (Abuse.ch)

kuhni-vivat.ru Hostname

modified 2026-09-21 00:37:39
Emotet (Abuse.ch) · Emotet (Mr.Looquer)

zgtaiji.com Hostname

modified 2026-09-21 00:37:39
Malware site (Hybrid-Analysis) · Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

haek.net Hostname

modified 2026-09-21 00:37:15
Emotet (Telefonica CO SOC) · Malware Download (Abuse.ch) · Lista España (CronUp Threat Intel) · Generic.Malware (Hybrid-Analysis) · Trojan.Generic (Hybrid-Analysis)

sbern.com Hostname

modified 2026-09-21 00:37:13
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Malicious domain (SANS Internet Storm Center)

tubbzmix.com Hostname

modified 2026-09-21 00:37:05
Emotet (Telefonica CO SOC) · Emotet (Abuse.ch) · Generic.Malware (Hybrid-Analysis) · Malware Download (Abuse.ch) · Bank of New Zealand phishing (Antiphishing.com.ar)

miris.in Hostname

modified 2026-09-21 00:37:04
Emotet (Abuse.ch) · Lista España (CronUp Threat Intel)

adatum.com Hostname

modified 2026-09-21 00:36:58
netsky ,worm (Maltiverse) · Generic.Malware (Hybrid-Analysis) · Trojan.Warezov (Hybrid-Analysis) · Stration.Gen@mm (Hybrid-Analysis) · Netsky.P@mm (Hybrid-Analysis)

nga.no Hostname

modified 2026-09-21 00:36:49
Emotet (Telefonica CO SOC) · Malicious domain (SANS Internet Storm Center)

theskinlab.de Hostname

modified 2026-09-21 00:36:48
Emotet (Telefonica CO SOC) · Emotet (Abuse.ch) · Emotet (Mr.Looquer)

leggingscom.com Hostname

modified 2026-09-21 00:36:37
Emotet (Telefonica CO SOC) · Emotet (Mr.Looquer)

sparq.co.nz Hostname

modified 2026-09-21 00:36:35
Emotet (Telefonica CO SOC) · Malware site (Hybrid-Analysis) · Agent (Hybrid-Analysis) · Malicious domain (SANS Internet Storm Center)

rkeeperua.com Hostname

modified 2026-09-21 00:36:17
Emotet (ThreatFox Abuse.ch)

db.rikaz.tech Hostname

modified 2026-09-21 00:36:17
Malware Download (URLhaus Abuse.ch) · Emotet (ThreatFox Abuse.ch)

ilgcap.net Hostname

modified 2026-09-21 00:35:56
Macro.Agent (Hybrid-Analysis) · Emotet (Telefonica CO SOC) · Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Malicious domain (SANS Internet Storm Center)

zmgmedia.com Hostname

modified 2026-09-21 00:35:54
VBA.Heur.Logan.849 (Hybrid-Analysis) · Emotet (Abuse.ch) · VB:Trojan.VBA.Agent (Hybrid-Analysis) · Malware site (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition)

flagshipfordcarolina.com Hostname

modified 2026-09-21 00:35:50
Heur.Macro.Generic.Gen (Hybrid-Analysis) · Trojan.DOC.Downloader (Hybrid-Analysis) · Emotet (Abuse.ch) · Emotet (Mr.Looquer)

sim.ttvmax.com Hostname

modified 2026-09-21 00:35:43
Malware Download (Abuse.ch) · Emotet (Mr.Looquer)

yantami.de Hostname

modified 2026-09-21 00:35:42
Emotet (Mr.Looquer) · W97m.Downloader (Hybrid-Analysis)

ciadasluvas.com.br Hostname

modified 2026-09-21 00:35:16
Emotet (Abuse.ch) · Emotet (Mr.Looquer)

wiki.ugix.ru Hostname

modified 2026-09-21 00:35:12
Malware Download (Abuse.ch) · Emotet (Mr.Looquer)

www.weblabor.com.br Hostname

modified 2026-09-21 00:35:01
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Malware site (Hybrid-Analysis) · Malicious site (Hybrid-Analysis) · VB:Trojan.VBA.Agent (Hybrid-Analysis)

n-brake.com Hostname

modified 2026-09-21 00:34:40
Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

billingup.com Hostname

modified 2026-09-21 00:34:25
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Social Engineering (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

altarfx.com Hostname

modified 2026-09-21 00:34:22
Emotet (Abuse.ch) · Emotet (Telefonica CO SOC) · Agent (Hybrid-Analysis) · Malicious domain (SANS Internet Storm Center) · Malware Download (Abuse.ch)